Cyber Security Analyst

The Incident Response Engineer, with a specialization in Incident Response Tools Management, This role involves ensuring that the incident response tools are properly integrated, maintained, and leveraged to enhance the organization's ability to respond to threats effectively.

Key Responsibilities:

• Oversee the selection, implementation, and management of incident response tools such as Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) solutions, Intrusion Detection Systems (IDS), and forensic tools.
• Ensure tools are configured to capture the necessary data for effective incident detection and response.
• Regularly review and update tool configurations to align with emerging threats and organizational needs.
• Lead the integration of incident response tools with other security systems and platforms within the organization.
• Optimize the performance of these tools to enhance the detection and response to security incidents.
• Develop and implement best practices for the use of incident response tools across the cybersecurity team.
• Utilize incident response tools to detect, investigate, and respond to security incidents.

Required Experience:

• Experience: 5-7 years of experience in cybersecurity, with a focus on incident response and incident response tool management.
• Experience in Tool Management: Hands-on experience in managing, configuring, and optimizing incident response tools in a large-scale environment.
• Experience in Incident Response: Extensive experience in responding to and managing complex security incidents using a variety of tools.

Education:

• Bachelor's degree or equivalent experience in Computer Science, Information Security, Cybersecurity, or a related field.
• Preferred: Master's Degree in Cybersecurity or related discipline.

Certifications (Preferred but not required):

• Certified Incident Handler (GCIH)
• Certified Computer Security Incident Handler (CSIH)
• Certified Forensic Computer Analyst (CFCA)
• GIAC Reverse Engineering Malware (GREM)
• EC-Council Certified Incident Handler (ECIH)
• EC-Council Certified Network Defender (CND)
• SANS FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
• Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)
• GIAC Certified Forensic Analyst (GCFA)
• Certified Information Systems Auditor (CISA)

Job Schedule